trunarrative.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:08:18:f8:39:30:16:5a:a6:91:17:b1:89:9c:53:95:d1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trunarrative.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:08:18:f8:39:30:16:5a:a6:91:17:b1:89:9c:53:95:d1
Serial Number (int): 295035575594113001259444486293396550555089
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:01:34:ef:e4:e5:26:d4:31:98:32:d6:4f:d2:a6:fd:4c:cc:cb:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:7b:bf:8d:98:df:0b:4c:24:7d:8b:4a:49:9b:b9:3f:38:dd:2c:4a
Fingerprint (sha256): 1c:28:65:98:4b:17:6b:a5:36:49:cb:b3:2c:c8:83:20:40:27:9d:16:af:40:71:09:0a:91:15:c6:54:f8:c8:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trunarrative.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trunarrative.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trunarrative.com
www.trunarrative.com

Other certificates including the domain name trunarrative.com

(limited to 100 certificates)
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
trunarrative.com
*.trunarrative.com
status.amanah.com
mylanstatus.globalvisioninc.com
status.channelengine.com
choicepoint.com
*.trunarrative.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.wavity.info
trunarrative.com
mi.portal.sagrado.edu
trunarrative.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
status.medpt.com
mi.portal.sagrado.edu
trunarrative.com
trunarrative.com
api.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
choicepoint.com
mi.portal.sagrado.edu
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
status.channelengine.com
api.trunarrative.com
mylanstatus.globalvisioninc.com
status.healthera.co.uk
www.trunarrative.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
api.trunarrative.com
www.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
status.medpt.com
trunarrative.com
knowledgebase.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
status.madrasmediaworks.in
mi.portal.sagrado.edu
status.appetize.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
staging.trunarrative.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
knowledgebase.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
status.themoviedb.org
*.trunarrative.com
status.quick-vue.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
help.trunarrative.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
status.tecsens.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
trunarrative.com
status.madrasmediaworks.in
mylanstatus.globalvisioninc.com

Certificate

The complete raw certificate details for trunarrative.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISA2MIGPg5MBZappEXsYmcU5XRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTExMjU3MDZaFw0x
OTA1MTIxMjU3MDZaMBsxGTAXBgNVBAMTEHRydW5hcnJhdGl2ZS5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQuQD6iIMi3D0BDcsUDxEALeqUF3X
KzcW1tYpXolqWPACrgwJPZbXXNPbQ4uqev4Te9+xd1Z5xruJZXNKu4ZxEp2dY1RJ
ov/9rX/9P2vJJ28bnKwJvFwmZJc7x78eSOmNlsTY+12j4FWBMv1iyXxjYRUsgmNc
DHbqywNZBJlKvAbEtl2IAXFyUCFZvhbZ0MSRXi4BX/MNX0c/WktGLd9wdCqgIBxZ
4Hsi/O6iBGiSZWDg11Q6cOSnbUmUWJp3nnureW10KNY9sXBIcIr9NL4L7JFDcUAD
kKH47prqVTy1pLTp1cJ/DJc/jwHzOLng0uRfC5+qXKZTLXcl8gKfSVpXAgMBAAGj
ggJ8MIICeDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJsBNO/k5SbUMZgy1k/Spv1M
zMvjMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wMQYDVR0RBCowKIIQdHJ1bmFycmF0aXZlLmNvbYIUd3d3LnRydW5hcnJh
dGl2ZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE
AdZ5AgQCBIH2BIHzAPEAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvM
VgAAAWjc2OBUAAAEAwBIMEYCIQC275/wj68rY/PrCuTMvPRTj1DnjioCEEQMbpyH
a4UwqAIhAPM3IY3a8cLKQ1sXEye/ixfhP0txoxePx5MdZTOKF+46AHYAKTxRllTI
OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFo3NjgcQAABAMARzBFAiB5/GGh
P/7sYiecLXTDb3LZkOOlcq+vMXGJuHv+9f9/vQIhAKq7MfAJwOn0CE5py4j+YCSl
4vxv6YswhfktEKUX/MhhMA0GCSqGSIb3DQEBCwUAA4IBAQA9G0qT3t9XcOi11tsn
veEDGv/cUwGwODtT9Old56ir9klqwTaCk6MLq5AGGTCIivdjoDFrfbsUKcPVMg4b
3H3g0cS8cEc4wf6OdSFwrRj6EE841RXEAq0Ge0ufRn8ci2e+XHWJCfOj2ZB3Fd4q
jhqSl73HwKvMtdSRebERwTMACMO/vlUKAmOwpO2IXTZMAQvArdnyjxhK95BjpKPw
HGEWWWr9sNzb//UFMatf045jjSfDfKonSwiqptMlIBtRMW5FTZfRxPbxkzEpVVM9
MBolFttLpd6X532s68Q+1QGTIJEO8g5Hf6HP86jxuvy3dUezN+r9mpAD8Z9Sy9Ou
LlSG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskLkA+oiDItw9AQ3LFA8
RAC3qlBd1ys3FtbWKV6JaljwAq4MCT2W11zT20OLqnr+E3vfsXdWeca7iWVzSruG
cRKdnWNUSaL//a1//T9rySdvG5ysCbxcJmSXO8e/HkjpjZbE2Ptdo+BVgTL9Ysl8
Y2EVLIJjXAx26ssDWQSZSrwGxLZdiAFxclAhWb4W2dDEkV4uAV/zDV9HP1pLRi3f
cHQqoCAcWeB7IvzuogRokmVg4NdUOnDkp21JlFiad557q3ltdCjWPbFwSHCK/TS+
C+yRQ3FAA5Ch+O6a6lU8taS06dXCfwyXP48B8zi54NLkXwufqlymUy13JfICn0la
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295035575594113001259444486293396550555089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 12:57:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 12:57:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trunarrative.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22503403309968431410186203517340538073671570430041881879759359678324671187627511984200642825596678617872039164194574322006627296207101027738823212139129946448994315707055741792476981224876581296977722161713416586012631629013366920642376534855152026901361525436233850568206357895651329916012946174630270700548484425519193070310752321629434329541638642523665684351371030633162425888866702376567506543863391950879398630092678355893630103292260051424000791021622949732507941581588994846067624259029501047064051374692877929599769204112710483651282274604345720701339067831713230747815073524506085342028025416684783352240727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b0134efe4e526d4319832d64fd2a6fd4ccccbe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunarrative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trunarrative.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168dcd8e0540000040300483046022100b6ef9ff08faf2b63f3eb0ae4ccbcf4538f50e78e2a0210440c6e9c876b8530a8022100f337218ddaf1c2ca435b171327bf8b17e13f4b71a3178fc7931d65338a17ee3a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168dcd8e0710000040300473045022079fc61a13ffeec62279c2d74c36f72d990e3a572afaf317189b87bfef5ff7fbd022100aabb31f009c0e9f4084e69cb88fe6024a5e2fc6fe98b3085f92d10a517fcc861
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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